Privacy Policy
This policy explains how I handle your personal data in line with UK GDPR.
Who I am
Data controller: Garry Ebrey Counselling (“I”, “me”). Contact: contact-page.
What data I collect
- Contact details (name, email, phone), enquiry messages
- Appointment information (times, attendance, payments)
- Brief session notes (factual, minimal)
Why I process your data (lawful bases)
- Contract: to deliver counselling services
- Legitimate interests: to manage appointments and ensure safe, effective practice
- Consent: for optional communications or where required
- Legal obligation: where law requires it (e.g., tax, safeguarding)
How I store data
Notes are stored securely and separately from contact details. I retain and destroy data in line with ethical, legal, and insurer requirements. I do not sell your data.
Your rights
- Access, rectification, erasure, restriction, portability, objection
- Withdraw consent where processing is based on consent
- Complain to the ICO if you’re unhappy with how your data is handled
Third parties & transfers
I only share data where necessary (e.g., with a supervisor under confidentiality, or where required by law). I aim to keep data within the UK/EEA; if transfer is needed, I use appropriate safeguards.
Cookies
If analytics or embedded media are used, they may set cookies. You can control cookies via your browser. For details, contact me via the contact page.